PwC CISSP Overview

Module 1: Security and Risk Management (Domain 1)

• Introduction to Security Concepts
• Security Governance Principles
• Compliance and Legal Issues
• Risk Management and Analysis
• Business Continuity and Disaster Recovery Planning
• Security Awareness and Training

Module 2: Asset Security (Domain 2)

• Information and Asset Classification
• Data Handling Requirements
• Privacy Protection
• Data Security Controls
• Retention and Deletion Policies

Module 3: Security Architecture and Engineering (Domain 3)

• Secure Design Principles
• Security Models and Architecture
• Cryptography Concepts and Applications
• Physical Security
• Security Engineering Processes

Module 4: Communication and Network Security (Domain 4)

• Secure Network Architecture and Design
• Secure Communication Channels
• Network Attack Strategies and Countermeasures
• Network Components and Protocols
• Secure Network Operations

Module 5: Identity and Access Management (IAM) (Domain 5)

• Identification and Authentication Concepts
• Identity as a Service (IDaaS)
• Federated Identity Management
• Access Control Models
• Implementing Access Controls

Module 6: Security Assessment and Testing (Domain 6)

• Security Assessment Strategies
• Penetration Testing Methodologies
• Vulnerability Management
• Security Audits and Reviews
• Continuous Monitoring

Module 7: Security Operations (Domain 7)

• Security Operations Concepts
• Incident Response and Recovery
• Logging and Monitoring Activities
• Disaster Recovery Planning
• Change and Configuration Management

Module 8: Software Development Security (Domain 8)

• Secure Software Development Lifecycle (SDLC)
• Application Security Controls
• Software Security Testing
• Code Review and Security
• Secure Software Deployment